Be a “dumbass”, like some of the world’s best cyber investigators

2021-05-07 05:00

While chatting over drinks one day, I asked him: "Why are you one of the most successful and influential cyber investigators I know? What is it about you that separates you from other investigators?".

In his explanation, he highlighted how frequently he receives threat reports and investigations from more junior investigators that explain in technical detail how a given function or process was exploited by an attacker to achieve their goals.

In my previous Help Net Security articles, I shared advice for aspiring threat hunters, investigators and researcers about how to start a career and stand out in front of potential employers by researching threats and writing about them.

Getting inside the minds of the best researchers and threat hunters.

For our research, we did not simply analyze the cognitive characteristics that separate people in information security from other branches of technology, but also the characteristics that separate security analysts from other subdisciplines in security.

Our research took a sharp and unexpected turn when we encountered the extreme reliance analysts - and specifically analysts - have on a mental characteristic called "Flexibility of Closure" to make accurate decisions in the first place.

News URL

http://feedproxy.google.com/~r/HelpNetSecurity/~3/tpdHStYAYqs/